Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/8078E57E79D511EDBBDFC527C4F9AE02.roa
File: 8078E57E79D511EDBBDFC527C4F9AE02.roa (raw, json)
Hash identifier: frU/2EHbom99htQxSxSTHbcrNXNduAoHiNnFF/Q/QvU=
Subject key identifier: 15:89:D4:4F:E8:89:2A:BB:4C:FA:E9:DD:9F:88:03:CF:51:00:F4:B0
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 0A06
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/8078E57E79D511EDBBDFC527C4F9AE02.roa
Signing time: Mon 12 Dec 2022 04:29:01 +0000
ROA not before: Mon 12 Dec 2022 04:29:01 +0000
ROA not after: Sun 30 Jul 2023 00:00:00 +0000
asID: 13768
IP address blocks: 115.167.12.0/22 maxlen: 24
115.167.52.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2566 (0xa06)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Dec 12 04:29:01 2022 GMT
Not After : Jul 30 00:00:00 2023 GMT
Subject: CN=6396ae0d-e9de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:da:5c:47:7c:f6:47:0b:48:68:e4:1b:74:22:
cd:c6:a9:4d:82:bf:18:d4:77:bb:4b:9b:91:d9:4f:
f3:7a:c7:67:40:ba:5f:30:e1:6e:3b:8c:da:dd:d6:
1f:1c:a2:bf:6c:59:60:c1:73:13:ca:f1:c8:ba:33:
69:e4:ab:b8:54:17:72:3e:7a:67:7f:56:36:e1:55:
5b:12:1d:0c:01:46:12:79:49:73:a6:67:13:d1:5b:
13:47:6a:56:fd:2a:99:21:de:b3:1e:1d:92:d8:6d:
55:e1:a6:2e:75:a3:23:d3:bb:3f:99:7c:ba:eb:39:
67:9b:4d:06:e7:50:95:1f:80:74:a5:d8:8b:19:bd:
92:8e:2e:f8:25:67:9a:57:76:e0:1d:01:89:b1:b4:
71:e7:c9:55:5f:1a:50:2c:89:a3:94:ed:95:98:30:
c1:7f:2d:bb:e6:2a:2c:9a:46:da:9e:1d:db:10:cb:
df:8d:20:e5:8e:6c:5c:56:d4:3b:5a:b3:f8:7f:71:
bb:3b:57:e5:59:6f:55:49:c5:a5:d0:05:aa:15:de:
bb:a7:00:16:4f:2d:00:63:3a:f5:83:46:c1:1e:93:
a2:19:2e:84:83:7e:81:be:ed:4f:4b:9f:14:53:cb:
cc:f6:23:22:3c:c0:7d:2b:12:cf:7b:84:6d:43:f9:
ed:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:89:D4:4F:E8:89:2A:BB:4C:FA:E9:DD:9F:88:03:CF:51:00:F4:B0
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/8078E57E79D511EDBBDFC527C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
115.167.12.0/22
115.167.52.0/22
Signature Algorithm: sha256WithRSAEncryption
95:89:5f:bd:dc:3c:d9:2c:bb:0e:52:74:82:fe:33:39:b0:a7:
4c:26:21:2c:b6:6e:35:47:95:c7:b5:53:55:cf:d3:86:bd:d8:
58:85:a2:12:9a:10:ae:eb:cc:1e:3d:6f:ff:d2:f5:d4:d9:97:
f7:45:56:37:e0:26:8c:8a:7c:ca:a0:d6:e5:de:06:61:18:45:
12:89:b6:c8:13:dc:4b:5c:b6:15:7d:51:5b:88:90:bb:5b:6f:
16:a1:37:cc:a1:53:c7:ed:51:94:41:48:29:44:83:a9:ab:13:
0e:e3:0e:21:34:a9:a4:08:73:75:c0:ed:20:b9:4c:47:14:d5:
59:37:c4:b7:bf:35:64:10:7f:f6:28:69:ea:bf:be:2f:15:a6:
60:f9:d5:87:84:a7:62:b3:c3:f1:c7:4e:85:b9:af:ac:9d:93:
85:ce:db:6a:e2:62:a1:65:3d:94:76:5e:b3:3b:f0:1f:40:c7:
90:bf:8c:c1:27:b9:b7:98:f5:ec:87:d3:13:87:c3:7d:41:ff:
54:46:3e:84:21:8b:97:a5:e9:8e:64:45:e0:48:31:32:62:59:
35:3c:58:f4:d0:20:9c:6e:fa:49:6c:ff:41:5e:fc:a4:22:35:
c2:5c:f4:70:64:03:df:d6:4a:cb:32:d1:7e:95:f4:67:71:e1:
04:fd:09:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:12 2023 by rpki-client on console-fra.rpki-client.org